The feh_unique_filename function in utils.c in feh 1.11.2...
Low severity
Unreviewed
Published
May 13, 2022
to the GitHub Advisory Database
•
Updated Feb 1, 2023
Description
Published by the National Vulnerability Database
Feb 14, 2011
Published to the GitHub Advisory Database
May 13, 2022
Last updated
Feb 1, 2023
The feh_unique_filename function in utils.c in feh 1.11.2 and earlier might allow local users to create arbitrary files via a symlink attack on a /tmp/feh_ temporary file, a different vulnerability than CVE-2011-0702.
References